$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft File: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft (raw, json) Hash identifier: cPrhXdzDXJ/ScATnsIeu6Z3ILhRdGLafonEunvN8MjE= Subject key identifier: 99:1B:C4:90:5B:37:E0:E8:57:0E:58:3E:D3:10:D6:A2:96:96:09:B9 Authority key identifier: 2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE Certificate issuer: /CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE Certificate serial: 1BE473A72732B23E35A5D42E05D661FC1E4E309A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:10:42 +0000 Manifest this update: Thu 24 Sep 2026 08:05:42 +0000 Manifest next update: Fri 25 Sep 2026 10:26:42 +0000 Files and hashes: 1: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl (hash: YNc7ytAikktMF7jXU64x3kZlkgfpRE4JjetsClXWKGE=) 2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: NCgxViu3PZp4P1Zo/9Bj21AhLCE0vj8q1oF29Jx6iTY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e4:73:a7:27:32:b2:3e:35:a5:d4:2e:05:d6:61:fc:1e:4e:30:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE Validity Not Before: Sep 24 08:05:42 2026 GMT Not After : Sep 25 10:26:42 2026 GMT Subject: CN=991BC4905B37E0E8570E583ED310D6A2969609B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:db:7b:0d:6e:1e:30:e1:da:38:27:af:66: 16:7b:d8:62:ae:00:4d:2d:00:e6:8a:01:5e:d7:95: 53:ad:e5:d6:37:0b:94:78:79:d5:2d:0c:3a:df:76: 47:c0:8f:93:2d:03:25:c2:90:05:26:91:0b:9d:b9: 3e:fb:36:4c:12:e2:45:f2:da:b3:48:57:4a:6a:28: 77:07:93:64:43:99:de:f6:c6:d2:0f:fe:c6:de:7d: 54:0e:c5:34:34:e5:a5:22:d0:90:be:2d:09:f1:a4: 5f:d3:7e:f7:61:ad:5b:0d:a1:cc:0a:d0:c8:cf:e3: 1a:79:ae:8c:8e:c6:fe:6f:2d:cc:5d:bb:c9:db:4e: 32:08:1b:8f:90:bd:20:3c:23:7a:ad:c8:6c:5c:94: 63:2f:a1:ea:b4:4c:2d:75:30:89:10:a8:94:c1:a2: 58:74:3e:88:28:8c:5a:ab:86:44:b9:85:d7:de:65: aa:27:eb:e8:f3:9b:82:3f:f4:9e:1c:96:9c:58:02: e1:a0:92:b2:dd:0b:f9:2a:32:f8:4d:a8:bb:cc:ca: 04:5f:21:0b:35:b6:d8:66:29:f0:cf:b0:97:d5:23: 4a:39:10:7c:39:da:ea:0a:70:d7:46:18:af:06:b9: b0:c4:26:52:64:a9:82:89:3e:44:56:17:37:9a:bd: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:C4:90:5B:37:E0:E8:57:0E:58:3E:D3:10:D6:A2:96:96:09:B9 X509v3 Authority Key Identifier: keyid:2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a4:cb:5b:a0:3a:dd:20:0c:01:34:34:b5:28:8c:38:ba:a7: 44:ef:26:53:42:ab:04:70:7d:02:e2:3c:97:66:8e:38:17:dc: 0c:b9:13:c7:30:bf:5d:7f:00:76:b2:34:79:08:ee:bc:97:4a: f8:1c:51:48:6f:da:63:18:32:bb:60:72:f1:c3:0c:9e:ca:f7: 1a:86:b2:fd:76:60:32:d4:fb:d1:12:ca:a1:d2:75:d1:c9:ac: 8c:a3:a0:cb:15:d9:ad:cf:a5:63:78:80:b0:98:a7:d6:ee:48: eb:a1:ed:e1:1b:91:c6:15:2e:f2:6e:0f:23:4d:f8:20:0c:5e: 84:ae:0e:10:c3:66:38:fb:00:12:3b:b5:f8:7c:bb:b6:e0:63: 25:f8:3e:8d:df:6c:a4:53:a8:24:96:9b:41:f9:15:cb:7e:80: 2e:11:99:2c:b1:13:8e:bc:5c:ba:c2:2e:a6:1c:58:da:58:f3: e6:e5:ce:79:4c:d6:d5:bb:f3:29:04:53:3a:b3:b1:8b:da:b8: 30:ce:27:a5:1c:a3:87:60:03:8c:ed:c2:3e:d6:35:28:17:7b: 83:51:60:7d:57:3b:1d:b2:67:9b:ef:d5:de:da:22:4b:aa:5d: 8c:82:71:4e:ab:05:a2:f5:40:31:71:ea:06:ff:43:a8:18:3d: 7a:c5:98:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+Rzpycysj41pdQuBdZh/B5OMJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFOTJFRTZBMDgzMDMzMzA5NEE1MjE1QUVGRjRFQjAy MTdFM0VGRTAeFw0yNjA5MjQwODA1NDJaFw0yNjA5MjUxMDI2NDJaMDMxMTAvBgNV BAMTKDk5MUJDNDkwNUIzN0UwRTg1NzBFNTgzRUQzMTBENkEyOTY5NjA5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ltt7DW4eMOHaOCevZhZ72GKu AE0tAOaKAV7XlVOt5dY3C5R4edUtDDrfdkfAj5MtAyXCkAUmkQuduT77NkwS4kXy 2rNIV0pqKHcHk2RDmd72xtIP/sbefVQOxTQ05aUi0JC+LQnxpF/TfvdhrVsNocwK 0MjP4xp5royOxv5vLcxdu8nbTjIIG4+QvSA8I3qtyGxclGMvoeq0TC11MIkQqJTB olh0PogojFqrhkS5hdfeZaon6+jzm4I/9J4clpxYAuGgkrLdC/kqMvhNqLvMygRf IQs1tthmKfDPsJfVI0o5EHw52uoKcNdGGK8GubDEJlJkqYKJPkRWFzeavR43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRvEkFs34OhXDlg+0xDWopaWCbkwHwYDVR0j BBgwFoAUL+ku5qCDAzMJSlIVrv9OsCF+Pv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlNDcxOWEtYWNlNC00MWYyLWEwNzAtOGRlMzE5MmI3ZjQ5LzAvMkZFOTJFRTZB MDgzMDMzMzA5NEE1MjE1QUVGRjRFQjAyMTdFM0VGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRkU5MkVFNkEwODMwMzMzMDk0QTUyMTVBRUZGNEVCMDIxN0Uz RUZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvMkZFOTJFRTZBMDgzMDMzMzA5NEE1MjE1QUVGRjRF QjAyMTdFM0VGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuky1ugOt0gDAE0NLUojDi6p0TvJlNCqwRw fQLiPJdmjjgX3Ay5E8cwv11/AHayNHkI7ryXSvgcUUhv2mMYMrtgcvHDDJ7K9xqG sv12YDLU+9ESyqHSddHJrIyjoMsV2a3PpWN4gLCYp9buSOuh7eEbkcYVLvJuDyNN +CAMXoSuDhDDZjj7ABI7tfh8u7bgYyX4Po3fbKRTqCSWm0H5Fct+gC4RmSyxE468 XLrCLqYcWNpY8+blznlM1tW78ykEUzqzsYvauDDOJ6Uco4dgA4ztwj7WNSgXe4NR YH1XOx2yZ5vv1d7aIkuqXYyCcU6rBaL1QDFx6gb/Q6gYPXrFmJE= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:37 2026 by rpki-client